# Top

**URL:** https://discuss.elastic.co/top.md?page=1623&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1624

---

## [File upload issue with Data Visualizer in Kibana](https://discuss.elastic.co/t/file-upload-issue-with-data-visualizer-in-kibana/276320)

<div class="topic-metadata">

**Author:** [@rai](https://discuss.elastic.co/u/rai)\
**Replies:** 1\
**Last updated:** [June 20, 2021, 1:01pm UTC](https://discuss.elastic.co/t/file-upload-issue-with-data-visualizer-in-kibana/276320 "2021-06-20T13:01:59Z")

</div>

I am trying to upload a simple JSON file { "address":{ "serviceLocationId":"873784937", "billerLocationId":"2234243", "locationType":"RESI", "dwellingType":"SINGLE", "taxGeoCode":"2342325" } } but getting follo…

---

## [What does the rbbi rule for icu\_tokenizer in the docs do?](https://discuss.elastic.co/t/what-does-the-rbbi-rule-for-icu-tokenizer-in-the-docs-do/121026)

<div class="topic-metadata">

**Author:** [@Judy\_Raj](https://discuss.elastic.co/u/Judy_Raj)\
**Replies:** 1\
**Last updated:** [February 22, 2018, 7:28pm UTC](https://discuss.elastic.co/t/what-does-the-rbbi-rule-for-icu-tokenizer-in-the-docs-do/121026 "2018-02-22T19:28:16Z")

</div>

I was trying to work with the icu tokenizer and came across the rbbi rules section in the docs. https://www.elastic.co/guide/en/elasticsearch/plugins/current/analysis-icu-tokenizer.html I used the same rule from the do…

---

## [Kibana field stopped being detected as "keyword", screwing up visualizations. How to fix?](https://discuss.elastic.co/t/kibana-field-stopped-being-detected-as-keyword-screwing-up-visualizations-how-to-fix/118524)

<div class="topic-metadata">

**Author:** [@kyle1441](https://discuss.elastic.co/u/kyle1441)\
**Replies:** 1\
**Last updated:** [February 6, 2018, 8:44am UTC](https://discuss.elastic.co/t/kibana-field-stopped-being-detected-as-keyword-screwing-up-visualizations-how-to-fix/118524 "2018-02-06T08:44:17Z")

</div>

Hi everyone, As you can see in these two images, there is a different number of records for these two searches. About a week ago, this field (as well as few others) stopped being detected as keyword, resulting in some v…

---

## [Script transform gives an internal server error in watcher](https://discuss.elastic.co/t/script-transform-gives-an-internal-server-error-in-watcher/107808)

<div class="topic-metadata">

**Author:** [@Sarra\_Bouhenni](https://discuss.elastic.co/u/Sarra_Bouhenni)\
**Replies:** 1\
**Last updated:** [November 19, 2017, 10:34am UTC](https://discuss.elastic.co/t/script-transform-gives-an-internal-server-error-in-watcher/107808 "2017-11-19T10:34:19Z")

</div>

Hello, I wanted to save aggregations results into a new indice to reduce real time calculations on Kibana, so I created a watcher that fetches the result of my pipelined aggregations (4 nested bucket arrays) into one l…

---

## [Capturing Traffic over websockets](https://discuss.elastic.co/t/capturing-traffic-over-websockets/78940)

<div class="topic-metadata">

**Author:** [@jnmoore](https://discuss.elastic.co/u/jnmoore)\
**Replies:** 1\
**Last updated:** [March 20, 2017, 9:26am UTC](https://discuss.elastic.co/t/capturing-traffic-over-websockets/78940 "2017-03-20T09:26:39Z")

</div>

Can packetbeat capture websocket traffic? If so, what kind of information is it able to log?

---

## [File output plugin always outputs json](https://discuss.elastic.co/t/file-output-plugin-always-outputs-json/67630)

<div class="topic-metadata">

**Author:** [@gcsaba2](https://discuss.elastic.co/u/gcsaba2)\
**Replies:** 1\
**Last updated:** [November 30, 2016, 3:20pm UTC](https://discuss.elastic.co/t/file-output-plugin-always-outputs-json/67630 "2016-11-30T15:20:57Z")

</div>

I'm reading from a plain text file and want to write the same plain text. So I wrote this: output { file { path =\> .... codec =\> line { format =\> "%{message}" } } } Looks like the file plugin ignores the …

---

## [Http\_poller with kerberos / NTLM authentication](https://discuss.elastic.co/t/http-poller-with-kerberos-ntlm-authentication/62867)

<div class="topic-metadata">

**Author:** [@Rom1](https://discuss.elastic.co/u/Rom1)\
**Replies:** 1\
**Last updated:** [October 26, 2016, 1:53pm UTC](https://discuss.elastic.co/t/http-poller-with-kerberos-ntlm-authentication/62867 "2016-10-26T13:53:18Z")

</div>

Hi all, I need to collect data from a server through http\_poller (http and not https) I've tried with basic authent (login/pwd) but, of course, it failed (I can connect to the web server with this login/pwd with SSO) …

---

## [Transport error : Cannot get new connection from pool](https://discuss.elastic.co/t/transport-error-cannot-get-new-connection-from-pool/53319)

<div class="topic-metadata">

**Author:** [@rupal](https://discuss.elastic.co/u/rupal)\
**Replies:** 1\
**Last updated:** [July 25, 2016, 9:57am UTC](https://discuss.elastic.co/t/transport-error-cannot-get-new-connection-from-pool/53319 "2016-07-25T09:57:22Z")

</div>

Transport error : Cannot get new connection from pool. How to solve connection error.

---

## [Chord diagrams](https://discuss.elastic.co/t/chord-diagrams/37988)

<div class="topic-metadata">

**Author:** [@juerkan](https://discuss.elastic.co/u/juerkan)\
**Replies:** 1\
**Last updated:** [December 26, 2015, 8:46pm UTC](https://discuss.elastic.co/t/chord-diagrams/37988 "2015-12-26T20:46:02Z")

</div>

Hi pros, Are there any plans for Chord diagrams?, like: http://bost.ocks.org/mike/uberdata/ That will boost kibana usage thx juergen

---

## [Prod deployment using kibana stand-alone?](https://discuss.elastic.co/t/prod-deployment-using-kibana-stand-alone/25587)

<div class="topic-metadata">

**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\
**Replies:** 1\
**Last updated:** [July 16, 2015, 5:15am UTC](https://discuss.elastic.co/t/prod-deployment-using-kibana-stand-alone/25587 "2015-07-16T05:15:13Z")

</div>

what is the suggested way of prod deployment using kibana stand-alone?

---

## [Elasticsearch mapping for adding custom metadata payload to log entries in ELK stack](https://discuss.elastic.co/t/elasticsearch-mapping-for-adding-custom-metadata-payload-to-log-entries-in-elk-stack/22031)

<div class="topic-metadata">

**Author:** [@Tomi\_SF](https://discuss.elastic.co/u/Tomi_SF)\
**Replies:** 1\
**Last updated:** [February 9, 2015, 10:56am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-for-adding-custom-metadata-payload-to-log-entries-in-elk-stack/22031 "2015-02-09T10:56:34Z")

</div>

We're using ELK stack for log management of a distributed application. In our log entries we have a field called "data" that can be of arbitrary type. We use this field to allow the developer to log any custom metada…

---

## [Elastic search and tomcat integration thread issue](https://discuss.elastic.co/t/elastic-search-and-tomcat-integration-thread-issue/11913)

<div class="topic-metadata">

**Author:** [@Chetana](https://discuss.elastic.co/u/Chetana)\
**Replies:** 1\
**Last updated:** [May 23, 2013, 11:57pm UTC](https://discuss.elastic.co/t/elastic-search-and-tomcat-integration-thread-issue/11913 "2013-05-23T23:57:39Z")

</div>

I need some help and it is urgent... I have created a war which invokes index and search on elasticsearch and deployed in Tomcat 6.x. But I am keep getting "org.apache.catalina.loader.WebappClassLoader clearRe…

---

## [First filter then run nested query](https://discuss.elastic.co/t/first-filter-then-run-nested-query/309905)

<div class="topic-metadata">

**Author:** [@Michal\_Bogusz](https://discuss.elastic.co/u/Michal_Bogusz)\
**Replies:** 2\
**Last updated:** [July 18, 2022, 1:51pm UTC](https://discuss.elastic.co/t/first-filter-then-run-nested-query/309905 "2022-07-18T13:51:03Z")

</div>

I have document with mapping: { "properties": { "title": {"type": "text"}, "added": {"type": "date"}, "pdf\_url": {"type": "text"}, "blocks": {"type": "nested"} } } I plan to have…

---

## [Remove first few characters from log file - filebeat](https://discuss.elastic.co/t/remove-first-few-characters-from-log-file-filebeat/277475)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 2\
**Last updated:** [July 1, 2021, 2:27pm UTC](https://discuss.elastic.co/t/remove-first-few-characters-from-log-file-filebeat/277475 "2021-07-01T14:27:54Z")

</div>

Hi Team, We are using filbeat as an agent to pull the logs from different servers, a few of the logs have prefixes that get stuck in front of actual log events. In order to parse the log files we need to remove these p…

---

## [Percentiles plot in vega-lite](https://discuss.elastic.co/t/percentiles-plot-in-vega-lite/262942)

<div class="topic-metadata">

**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\
**Replies:** 2\
**Last updated:** [February 2, 2021, 12:54pm UTC](https://discuss.elastic.co/t/percentiles-plot-in-vega-lite/262942 "2021-02-02T12:54:55Z")

</div>

Hi , I want a visualization(bar plot) in kibana through vega-lite to aggregate the data on 90th percentile and 10th percentile and groupby the data on multiple fields, on x-axis , I want to display group1 , group2 etc.…

---

## [Kibana data table](https://discuss.elastic.co/t/kibana-data-table/248631)

<div class="topic-metadata">

**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\
**Replies:** 2\
**Last updated:** [September 15, 2020, 11:58am UTC](https://discuss.elastic.co/t/kibana-data-table/248631 "2020-09-15T11:58:01Z")

</div>

Hi, I create a data table visualisation kibana. I add split table option on timestamp, but after it.It is creating problem on export option. When I export it, timestamp field not showing in correct format and one colum…

---

## [Elasticsearch snapshot backups in azure repository unknown host exception](https://discuss.elastic.co/t/elasticsearch-snapshot-backups-in-azure-repository-unknown-host-exception/224436)

<div class="topic-metadata">

**Author:** [@Yanislav\_Shetrev](https://discuss.elastic.co/u/Yanislav_Shetrev)\
**Replies:** 2\
**Last updated:** [March 23, 2020, 4:29pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-backups-in-azure-repository-unknown-host-exception/224436 "2020-03-23T16:29:53Z")

</div>

Trying to create backup repository for snapshots in Elasticsearch 6.5.2. But I am getting Internal server error(500) when executing the curl below. The error message is {"type":"unknown\_host\_exception","reason":"{{stora…

---

## [Java APM Client ErrorLoggingListener Issue](https://discuss.elastic.co/t/java-apm-client-errorlogginglistener-issue/191201)

<div class="topic-metadata">

**Author:** [@suikast42](https://discuss.elastic.co/u/suikast42)\
**Replies:** 2\
**Last updated:** [July 18, 2019, 2:21pm UTC](https://discuss.elastic.co/t/java-apm-client-errorlogginglistener-issue/191201 "2019-07-18T14:21:09Z")

</div>

Today I simulate an overload of my app an expect an outofmemory error and an invocation of my UncaughtExceptionHandler. But there's an issue in co.elastic.apm.agent.bci.bytebuddy.ErrorLoggingListener public void on…

---

## [Kibana 7- How to debug custom plugin in the browser?](https://discuss.elastic.co/t/kibana-7-how-to-debug-custom-plugin-in-the-browser/180076)

<div class="topic-metadata">

**Author:** [@swood1](https://discuss.elastic.co/u/swood1)\
**Replies:** 2\
**Last updated:** [May 8, 2019, 2:33pm UTC](https://discuss.elastic.co/t/kibana-7-how-to-debug-custom-plugin-in-the-browser/180076 "2019-05-08T14:33:54Z")

</div>

Hello, I have spun up Kibana 7.0 and elastic search instances and generated a plugin template using kbn-plugin-generator. I have built a simple react app that is ran as a custom plugin. This works, but I am unable to v…

---

## [Grok Processor Custom Patterns](https://discuss.elastic.co/t/grok-processor-custom-patterns/177543)

<div class="topic-metadata">

**Author:** [@Ryne\_Keel](https://discuss.elastic.co/u/Ryne_Keel)\
**Replies:** 2\
**Last updated:** [April 18, 2019, 10:16pm UTC](https://discuss.elastic.co/t/grok-processor-custom-patterns/177543 "2019-04-18T22:16:32Z")

</div>

I am trying to find out how to add new patterns to GET \_ingest/processor/grok I would like to do this so I can use filebeat to send a few extra log types to elasticsearch. Currently I am sending a few things directly t…

---

## [Nexsus log grok parse](https://discuss.elastic.co/t/nexsus-log-grok-parse/161065)

<div class="topic-metadata">

**Author:** [@dh77hd](https://discuss.elastic.co/u/dh77hd)\
**Replies:** 2\
**Last updated:** [December 17, 2018, 7:57am UTC](https://discuss.elastic.co/t/nexsus-log-grok-parse/161065 "2018-12-17T07:57:25Z")

</div>

Hi. I wanna parse Nexsus log using grok filter. But, it doesn't work. please help me. Here is my log \<189\>: 2018 Dec 17 11:33:04 KST: %ETHPORT-5-IF\_ADMIN\_UP: Interface Ethernet1/40 is admin up . and I want to parse …

---

## [Script aggregation yields wrong (but close) answer](https://discuss.elastic.co/t/script-aggregation-yields-wrong-but-close-answer/133744)

<div class="topic-metadata">

**Author:** [@rschwieb](https://discuss.elastic.co/u/rschwieb)\
**Replies:** 2\
**Last updated:** [May 30, 2018, 1:38pm UTC](https://discuss.elastic.co/t/script-aggregation-yields-wrong-but-close-answer/133744 "2018-05-30T13:38:15Z")

</div>

I put a single item into an index with a start field of value 1527619504.71632. Then I ran this search with an script in the aggregation: {"query": {"match\_all": {}}, "aggs": {"total": {"sum": {"script": {"source": "d…

---

## [Add an array in an array](https://discuss.elastic.co/t/add-an-array-in-an-array/118901)

<div class="topic-metadata">

**Author:** [@uderline](https://discuss.elastic.co/u/uderline)\
**Replies:** 2\
**Last updated:** [March 1, 2018, 4:29pm UTC](https://discuss.elastic.co/t/add-an-array-in-an-array/118901 "2018-03-01T16:29:37Z")

</div>

Hello ! I'm working with the 5.6 elastic stack. I would like to be able to include an array in an array when doing a add\_field using Logstash. mutate { add\_field =\> { "weight" =\> \[ \[0.4, 0.6\], \[0.3, 0.8\], \[0.6, 0.9…

---

## [Another free plugin for authentication (like x-pack )](https://discuss.elastic.co/t/another-free-plugin-for-authentication-like-x-pack/105656)

<div class="topic-metadata">

**Author:** [@Amin1](https://discuss.elastic.co/u/Amin1)\
**Replies:** 2\
**Last updated:** [November 1, 2017, 5:45am UTC](https://discuss.elastic.co/t/another-free-plugin-for-authentication-like-x-pack/105656 "2017-11-01T05:45:01Z")

</div>

Since x-pack is commercial for more complex scenarios how can I add security (authentication and authorization) to users? I have though of an API Gateway but this will either give full access to ES and Kibana to all auth…

---

## [Kibana not working after x-pack uninstalled](https://discuss.elastic.co/t/kibana-not-working-after-x-pack-uninstalled/83799)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 2\
**Last updated:** [April 28, 2017, 8:35am UTC](https://discuss.elastic.co/t/kibana-not-working-after-x-pack-uninstalled/83799 "2017-04-28T08:35:37Z")

</div>

I had installed x-pack earlier and used it, and hosted Kibana through Nginx. I yesterday uninstalled x-pack from both elasticsearch and kibana, via sudo bin/elasticsearch-plugin remove x-pack and sudo bin/kibana-plug…

---

## [Logstash5.1.2-- allow proxy to download the plug-in from the internet](https://discuss.elastic.co/t/logstash5-1-2-allow-proxy-to-download-the-plug-in-from-the-internet/73083)

<div class="topic-metadata">

**Author:** [@rlv\_praveen](https://discuss.elastic.co/u/rlv_praveen)\
**Replies:** 2\
**Last updated:** [January 30, 2017, 10:07am UTC](https://discuss.elastic.co/t/logstash5-1-2-allow-proxy-to-download-the-plug-in-from-the-internet/73083 "2017-01-30T10:07:39Z")

</div>

Hi, I tried to update my Logstash mongo db plug in but it is showing me couldnt download the mongo db plug in. In one of the piost i saw as we have to enable the proxy to download, can you guys help me in setting the …

---

## [Nest documentation: where are the examples?](https://discuss.elastic.co/t/nest-documentation-where-are-the-examples/65236)

<div class="topic-metadata">

**Author:** [@bigerock](https://discuss.elastic.co/u/bigerock)\
**Replies:** 2\
**Last updated:** [November 8, 2016, 2:51pm UTC](https://discuss.elastic.co/t/nest-documentation-where-are-the-examples/65236 "2016-11-08T14:51:14Z")

</div>

Version 1.x of Next/Elasticsearch .Net client was much richer with examples on how to set up the indexes and perform searches, etc. I've noticed this version seems to only give unit test style examples. Are there actual …

---

## [Mapper-attachments-2.3.3 MapperParsingException\[No content is provided.\]](https://discuss.elastic.co/t/mapper-attachments-2-3-3-mapperparsingexception-no-content-is-provided/59962)

<div class="topic-metadata">

**Author:** [@AnSoTo](https://discuss.elastic.co/u/AnSoTo)\
**Replies:** 2\
**Last updated:** [September 7, 2016, 3:55pm UTC](https://discuss.elastic.co/t/mapper-attachments-2-3-3-mapperparsingexception-no-content-is-provided/59962 "2016-09-07T15:55:19Z")

</div>

Hello everyone, I have an error I don't succeed to solve... I put a mapping file that looks like this : { "article" : { "properties" : { "title" : {"type" : "string"}, "artic…

---

## [Kibana Plugins with Static Kibana](https://discuss.elastic.co/t/kibana-plugins-with-static-kibana/52770)

<div class="topic-metadata">

**Author:** [@imithya](https://discuss.elastic.co/u/imithya)\
**Replies:** 2\
**Last updated:** [June 14, 2016, 10:43pm UTC](https://discuss.elastic.co/t/kibana-plugins-with-static-kibana/52770 "2016-06-14T22:43:41Z")

</div>

How can we use Kibana Plugins such as Timelion, Shield, etc with ElasticSearch with static Kibana. The Kibana we have deployed is without the bundled server - see https://github.com/elastic/kibana/issues/1628. This versi…

---

## [Filebeat subdirectories and logstash multiline problems](https://discuss.elastic.co/t/filebeat-subdirectories-and-logstash-multiline-problems/52060)

<div class="topic-metadata">

**Author:** [@elkforce](https://discuss.elastic.co/u/elkforce)\
**Replies:** 2\
**Last updated:** [June 9, 2016, 8:49am UTC](https://discuss.elastic.co/t/filebeat-subdirectories-and-logstash-multiline-problems/52060 "2016-06-09T08:49:39Z")

</div>

Hello, i want ship user logs(java multiline) with filebeat to logstash, but the multiline Events get events from another Event. MY CONFIG: The user logs are: /tmp/user1/application.log /tmp/user2/application.log /tmp…

---

## [Filter an IP with Variable part](https://discuss.elastic.co/t/filter-an-ip-with-variable-part/47552)

<div class="topic-metadata">

**Author:** [@vtmtwwf](https://discuss.elastic.co/u/vtmtwwf)\
**Replies:** 2\
**Last updated:** [April 18, 2016, 9:09pm UTC](https://discuss.elastic.co/t/filter-an-ip-with-variable-part/47552 "2016-04-18T21:09:20Z")

</div>

Hello everybody! I am receiving logs from several routers in a building with 20 companies. I would like to identify my top 10 Internet destinations, but I would like to see the Name of the destination in my Kibana graphs…

---

## [Is it possible to dynamically aggregate time?](https://discuss.elastic.co/t/is-it-possible-to-dynamically-aggregate-time/41767)

<div class="topic-metadata">

**Author:** [@Sauha](https://discuss.elastic.co/u/Sauha)\
**Replies:** 2\
**Last updated:** [February 16, 2016, 10:12am UTC](https://discuss.elastic.co/t/is-it-possible-to-dynamically-aggregate-time/41767 "2016-02-16T10:12:04Z")

</div>

Hi community, I'm pretty new to ELK and still learning by doing to see if it fits my need. First of all a bit of background: I have a program that will launch a bunch of processes and at the end, I want to generate a…

---

## [Logstash Windows Event Logging](https://discuss.elastic.co/t/logstash-windows-event-logging/36469)

<div class="topic-metadata">

**Author:** [@usmanjamali90](https://discuss.elastic.co/u/usmanjamali90)\
**Replies:** 2\
**Last updated:** [December 7, 2015, 7:13am UTC](https://discuss.elastic.co/t/logstash-windows-event-logging/36469 "2015-12-07T07:13:41Z")

</div>

EventLog plugin not ingesting previous logs (log events that were registered before running the logstash). I am running it from command line and it is ingesting the new events.

---

## [REDIS and LOGSTASH communication monitoring](https://discuss.elastic.co/t/redis-and-logstash-communication-monitoring/35591)

<div class="topic-metadata">

**Author:** [@billy6](https://discuss.elastic.co/u/billy6)\
**Replies:** 2\
**Last updated:** [November 26, 2015, 8:39am UTC](https://discuss.elastic.co/t/redis-and-logstash-communication-monitoring/35591 "2015-11-26T08:39:10Z")

</div>

Hello, I'm using the configuration Logstash in one machine as a shipper and in other machine I have REDIS with logstash, elasticsearch and Kibana. I would like to see how Redis comunicate with logstash in the second …

---

## [Change Elasticsearch settings without Kibana](https://discuss.elastic.co/t/change-elasticsearch-settings-without-kibana/301681)

<div class="topic-metadata">

**Author:** [@carl25en](https://discuss.elastic.co/u/carl25en)\
**Replies:** 6\
**Last updated:** [April 6, 2022, 5:42am UTC](https://discuss.elastic.co/t/change-elasticsearch-settings-without-kibana/301681 "2022-04-06T05:42:21Z")

</div>

Hey there! I was wondering if there is any way to change the settings of Elasticsearch without using Kibana. I specifically have to change the size of the result of query from 10,000 (default) to 120,000. Is it possible…

---

## [Elasticsearch Upgrade from 2.4 to 6.8](https://discuss.elastic.co/t/elasticsearch-upgrade-from-2-4-to-6-8/262580)

<div class="topic-metadata">

**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\
**Replies:** 6\
**Last updated:** [January 29, 2021, 1:07am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-2-4-to-6-8/262580 "2021-01-29T01:07:37Z")

</div>

We are planning to upgrade elasticsearch from version 2.4 to 6.8. The current version of elasticsearch was an upgrade from 1.7 (side by side upgrade. Indices were restored to the new cluster). Since the indices are creat…

---

## [Elastic SIEM No Failed Authentications](https://discuss.elastic.co/t/elastic-siem-no-failed-authentications/231344)

<div class="topic-metadata">

**Author:** [@wilfyboyGG](https://discuss.elastic.co/u/wilfyboyGG)\
**Replies:** 6\
**Last updated:** [May 14, 2020, 1:42pm UTC](https://discuss.elastic.co/t/elastic-siem-no-failed-authentications/231344 "2020-05-14T13:42:00Z")

</div>

Hello Community! I'm Exploring ELK as a SIEM. As a beginner I have Winlogbea installed on a virtual machine that's subscribed to forwarded events from Domain Controller. I've made subsequent changes to the YML file and …

---

## [Logstash internal monitoring not sending any info](https://discuss.elastic.co/t/logstash-internal-monitoring-not-sending-any-info/213388)

<div class="topic-metadata">

**Author:** [@Vincent\_Maury](https://discuss.elastic.co/u/Vincent_Maury)\
**Replies:** 6\
**Last updated:** [December 31, 2019, 7:28pm UTC](https://discuss.elastic.co/t/logstash-internal-monitoring-not-sending-any-info/213388 "2019-12-31T19:28:18Z")

</div>

Hi, I've setup Elasticsearch, Kibana and Logstash using https://www.elastic.co/guide/en/elastic-stack/current/installing-elastic-stack.html I activated monitoring from Kibana monitoring UI. then I tried configuring th…

---

## [Elasticsearch down after plugin installation](https://discuss.elastic.co/t/elasticsearch-down-after-plugin-installation/146319)

<div class="topic-metadata">

**Author:** [@jesusgn90](https://discuss.elastic.co/u/jesusgn90)\
**Replies:** 6\
**Last updated:** [August 28, 2018, 8:32pm UTC](https://discuss.elastic.co/t/elasticsearch-down-after-plugin-installation/146319 "2018-08-28T20:32:47Z")

</div>

Hello team, since 6.4.0 I noticed that installing a plugin successfully makes Elasticsearch goes down. Then I must restart it manually and then all it's fine. Is this an addition in 6.4.0? Why it happened? Regards, Je…

---

## [Load Balancer for Elastic Cloud](https://discuss.elastic.co/t/load-balancer-for-elastic-cloud/344839)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 3\
**Last updated:** [October 27, 2023, 7:05am UTC](https://discuss.elastic.co/t/load-balancer-for-elastic-cloud/344839 "2023-10-27T07:05:27Z")

</div>

Would like to know whether Load Balancer can be used for Elastic Cloud in Azure. Any reference architecture diagram will help.

---

## [Kibana7.13 development problems](https://discuss.elastic.co/t/kibana7-13-development-problems/276975)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 3\
**Last updated:** [June 28, 2021, 12:36pm UTC](https://discuss.elastic.co/t/kibana7-13-development-problems/276975 "2021-06-28T12:36:33Z")

</div>

Hello all, I hope you are doing well! I have been trying to develop Kibana 7.13 and using yarn 1.22.5 and node v14.16.1. It's been a week since I am trying and nothing's happening. I am using windows 10. somebody aske…

---

## [Data validation error from traefik(go agent) to elastic apm server](https://discuss.elastic.co/t/data-validation-error-from-traefik-go-agent-to-elastic-apm-server/267614)

<div class="topic-metadata">

**Author:** [@jinner](https://discuss.elastic.co/u/jinner)\
**Replies:** 3\
**Last updated:** [March 22, 2021, 3:09am UTC](https://discuss.elastic.co/t/data-validation-error-from-traefik-go-agent-to-elastic-apm-server/267614 "2021-03-22T03:09:44Z")

</div>

Kibana version: 7.6.1 Elasticsearch version: 7.6.1 APM Server version: 7.6.1 APM Agent language and version: traefik(go agent), 2.4.7 Browser version: N/A Original install method (e.g. download page, yum, deb, …

---

## [Compare wildcard string to cell value and replace in canvas expression](https://discuss.elastic.co/t/compare-wildcard-string-to-cell-value-and-replace-in-canvas-expression/263234)

<div class="topic-metadata">

**Author:** [@fuzzyWedgie](https://discuss.elastic.co/u/fuzzyWedgie)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 2:07pm UTC](https://discuss.elastic.co/t/compare-wildcard-string-to-cell-value-and-replace-in-canvas-expression/263234 "2021-02-08T14:07:37Z")

</div>

How can I replace all cell values in a table in canvas if it matches a wildcard string ? I want to normalize some values in the table in a way that if a table cell contains "test abc" I want the cell value to be repla…

---

## [Data Masking in Elasticsearch Index](https://discuss.elastic.co/t/data-masking-in-elasticsearch-index/230554)

<div class="topic-metadata">

**Author:** [@aviman](https://discuss.elastic.co/u/aviman)\
**Replies:** 3\
**Last updated:** [May 5, 2020, 3:28pm UTC](https://discuss.elastic.co/t/data-masking-in-elasticsearch-index/230554 "2020-05-05T15:28:15Z")

</div>

How can I mask Data in Elastisearch Index field. Ex: Have a Description field which contains email id inside it I just want to replace the email id with some string 'xxx' and leave other part of description as it. Is …

---

## [Geodistance sort throws Elasticsearch exception \[type=parsing\_exception, reason=\[\_geo\_distance\] does not support \[ignore\_unmapped\]\] Elastic search version 6.3.0](https://discuss.elastic.co/t/geodistance-sort-throws-elasticsearch-exception-type-parsing-exception-reason-geo-distance-does-not-support-ignore-unmapped-elastic-search-version-6-3-0/222930)

<div class="topic-metadata">

**Author:** [@jsunish](https://discuss.elastic.co/u/jsunish)\
**Replies:** 3\
**Last updated:** [March 10, 2020, 2:14pm UTC](https://discuss.elastic.co/t/geodistance-sort-throws-elasticsearch-exception-type-parsing-exception-reason-geo-distance-does-not-support-ignore-unmapped-elastic-search-version-6-3-0/222930 "2020-03-10T14:14:38Z")

</div>

I am searching the index object based on the lat long (geo\_point type) for a distance of 999km and I am sorting it on the ascending order. But I am getting the exception Elasticsearch exception \[type=parsing\_exception, …

---

## [How to create watcher alert for data or documents are not received on metricbeat or filebeat](https://discuss.elastic.co/t/how-to-create-watcher-alert-for-data-or-documents-are-not-received-on-metricbeat-or-filebeat/214397)

<div class="topic-metadata">

**Author:** [@vishnuvardhan](https://discuss.elastic.co/u/vishnuvardhan)\
**Replies:** 3\
**Last updated:** [January 10, 2020, 12:30pm UTC](https://discuss.elastic.co/t/how-to-create-watcher-alert-for-data-or-documents-are-not-received-on-metricbeat-or-filebeat/214397 "2020-01-10T12:30:25Z")

</div>

Hi team, i am already enable the feature watcher email alert on my elasticsearch ,i need to know how to create watcher email alert, when no data received from metricbeat of my kibana discover . how to do please help me …

---

## [Sending Watchguard Firewall logs to the logstash](https://discuss.elastic.co/t/sending-watchguard-firewall-logs-to-the-logstash/170496)

<div class="topic-metadata">

**Author:** [@DavidLevi](https://discuss.elastic.co/u/DavidLevi)\
**Replies:** 0\
**Last updated:** [March 1, 2019, 12:36pm UTC](https://discuss.elastic.co/t/sending-watchguard-firewall-logs-to-the-logstash/170496 "2019-03-01T12:36:41Z")

</div>

Hello guys, How can I send my firewall Watchguard Firebox X505 logs to the Logstash? Many Thanks,

---

## [Filebeat-6.5.1 Registry is Never Cleaned](https://discuss.elastic.co/t/filebeat-6-5-1-registry-is-never-cleaned/160861)

<div class="topic-metadata">

**Author:** [@396175371](https://discuss.elastic.co/u/396175371)\
**Replies:** 3\
**Last updated:** [December 21, 2018, 8:31am UTC](https://discuss.elastic.co/t/filebeat-6-5-1-registry-is-never-cleaned/160861 "2018-12-21T08:31:52Z")

</div>

Filebeat 6.5.1, Red Hat 4.4.7 my filebeat can not clean up registry, Here is the my config: filebeat.inputs: - type: log enabled: true paths: - /vol/\*.log encoding: utf-8 exclude\_files: \['.\*gc.log$'\] mul…

---

## [Error as an when data node is trying to connect to master node in elasticsearch clustering](https://discuss.elastic.co/t/error-as-an-when-data-node-is-trying-to-connect-to-master-node-in-elasticsearch-clustering/149644)

<div class="topic-metadata">

**Author:** [@CheshtaS](https://discuss.elastic.co/u/CheshtaS)\
**Replies:** 3\
**Last updated:** [September 24, 2018, 12:28pm UTC](https://discuss.elastic.co/t/error-as-an-when-data-node-is-trying-to-connect-to-master-node-in-elasticsearch-clustering/149644 "2018-09-24T12:28:00Z")

</div>

Getting below error as an when data node is trying to connect to master node in elasticsearch clustering \[node \] \[data1\] stopped \[2018-09-24 09:11:55,728\]\[INFO \]\[node \] \[data1\] c…

---

## [Is the winlogbeat 6 template backwards compatible to 5.x?](https://discuss.elastic.co/t/is-the-winlogbeat-6-template-backwards-compatible-to-5-x/108594)

<div class="topic-metadata">

**Author:** [@kwslavens](https://discuss.elastic.co/u/kwslavens)\
**Replies:** 3\
**Last updated:** [November 29, 2017, 2:27am UTC](https://discuss.elastic.co/t/is-the-winlogbeat-6-template-backwards-compatible-to-5-x/108594 "2017-11-29T02:27:16Z")

</div>

Is it possible to feed winlogbeat 5.x agents to a index using a 6.0.0 template? Is the template backwards compatible? Here is the problem, with the way the new winlogbeat agents break out the templates into separate nam…

[Previous page](https://discuss.elastic.co/top.md?page=1622&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1624&per_page=50&period=all)
